kata-containers — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in kata-containers, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-64676	Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory CWE-862	5.7	Medium	2026-08-07
CVE-2026-47243	Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs CWE-22	9.2	Critical	2026-08-07
CVE-2026-50540	Kata Containers: Config Path Annotation Arbitrary File Loading CWE-20	9.6	Critical	2026-08-07
CVE-2026-44210	Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations CWE-88	5.8	Medium	2026-07-23
CVE-2026-41326	Kata Containers: CopyFile Policy Subversion via Symlinks CWE-61	8.2	High	2026-04-24
CVE-2026-24834	Kata Container to Guest micro VM privilege escalation CWE-732	9.4	Critical	2026-02-19
CVE-2026-24054	Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layers CWE-754	3.8	-	2026-01-29
CVE-2025-58354	Kata Containers coco-tdx malicious host can circumvent initdata verification CWE-754	8.8^AI	High ^AI	2025-09-23

All 8 known CVE vulnerabilities affecting kata-containers with full Chinese analysis, references, and POCs where available.